CVE-2026-35065 is a missing authentication vulnerability in Dell PowerFlex Manager before version 5.1.0.1. It permits unauthenticated attackers on an adjacent network to exploit critical functions without proper authentication controls. The vulnerability impacts confidentiality, integrity, and availability, enabling code execution, denial of service, information disclosure and tampering, remote execution, script injection, and unauthorized access. The CVSS v3.1 base score is 8.8, reflecting high severity with low attack complexity and no required privileges or user interaction. No patch or official remediation level has been disclosed by Dell as of the publication date.

Successful exploitation could lead to full compromise of the affected Dell PowerFlex Manager system, including execution of arbitrary code, denial of service conditions, unauthorized disclosure and modification of sensitive information, and unauthorized access. The vulnerability affects system confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level has been published by Dell, users should monitor Dell's security advisories for updates. Until a patch is available, restrict adjacent network access to the affected system and apply network-level controls to limit exposure.